MalwareBazaar[.]9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.9
Size

662KB
MD5

1bde40707f0a84ec8846f98661c51d2a
SHA1

69ceec239dfe7012089572742569f61622c42ddc
SHA256

9d948a18acdd4d4ea3c1fbab2ea72de766e1434b208ed78ce000b81ece996874
SHA512

dec91bcfb3f6f08f00180c895fb513fe0c134c0519e48ceb8984103ce725c47a75b6e8e2332921d265fa2d7741822a419b75bd21f780317b805efa0b1fffce9d
SSDEEP

12288:/+HaZUcbHnz+pDYZrgl4WWqXdtoOs2tf6clw7TgQdKEVzOtA8kLt1WiLMiHoWxMG:QahbHnz+pkxMLz1s2FNq//dXVik5ZYPF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.9

Files

MalwareBazaar.9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JnwO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ